Mining Botnets and Their Evolution Patterns  

作　　者：Jaehoon Choi Jaewoo Kang Jinseung Lee Chihwan Song Qingsong Jin Sunwon Lee Jinsun Uh 

机构地区：[1]Department of Computer Science and Engineering, Korea University [2]Daou Technology Inc.

出　　处：《Journal of Computer Science & Technology》2013年第4期605-615,共11页计算机科学技术学报（英文版）

基　　金：supported by the National Research Foundation of Korea (NRF) funded by the Ministry of Education,Science and Technology (MEST) of Korea under Grant No. 2012R1A2A2A01014729

摘　　要：The botnet is the network of compromised computers that have fallen under the control of hackers after being infected by malicious programs such as trojan viruses. The compromised machines are mobilized to perform various attacks including mass spamming, distributed denial of service （DDoS） and additional trojans. This is becoming one of the most serious threats to the Internet infrastructure at present. We introduce a method to uncover compromised machines and characterize their behaviors using large email logs. We report various spain campaign variants with different characteristics and introduce a statistical method to combine them. We also report the long-term evolution patterns of the spare campaigns.The botnet is the network of compromised computers that have fallen under the control of hackers after being infected by malicious programs such as trojan viruses. The compromised machines are mobilized to perform various attacks including mass spamming, distributed denial of service （DDoS） and additional trojans. This is becoming one of the most serious threats to the Internet infrastructure at present. We introduce a method to uncover compromised machines and characterize their behaviors using large email logs. We report various spain campaign variants with different characteristics and introduce a statistical method to combine them. We also report the long-term evolution patterns of the spare campaigns.

关 键 词：BOTHER botnet evolution bother spamming 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术] TD863[自动化与计算机技术—计算机科学与技术]